Skip to content
Sign in
7.3 High

CVE-2025-36460 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter…

Description

Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 2 (`WBIO_USH_GET_IDENTITY`) with an improper `ReceiveBuferSize` value.

Affected products and versions

Product Affected versions Fixed in
BCM5820X Versions not published
ControlVault3 5.15 earliest → < 5.15.14.19 5.15.14.19
ControlVault3 Plus 6.2 earliest → < 6.2.36.47 6.2.36.47

Other CVEs of BCM5820X

The 13 CVEs of BCM5820X →
CVE-2025-31649 A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior… 8.7 High CVE-2025-31361 A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell… 8.7 High CVE-2025-36463 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High CVE-2025-36462 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High
Track this CVE